Learn how you can help maintain control of your environment by choosing the right AWS security tools with this introductory webinar. We will show you how AWS Identity and Access Management (IAM), AWS Config Rules, and AWS Cloud Trail can help you maintain that control. You will discover how to track changes, monitor compliance, and keep an audit record of API requests.

1. ianmas@amazon.com
@IanMmmm
Ian Massingham — Technical Evangelist
Getting Started with
AWS Security

2. Getting Started with AWS Security
Architected to be one of the most flexible and secure cloud environments
Removes many of the security headaches that come with infrastructure
Built in Security Features

3. Agenda
Sharing the Security Responsibility
Overview of AWS Security Features
Verifying our Security
Useful Resources

4. AWS security
approach
Size of AWS
security team
Visibility into
usage & resources
Increasing your Security Posture in the Cloud

5. Broad Accreditations & Certifications
ISO 27001 ISO 9001
MPAA

6. Partner ecosystem Customer ecosystem Everyone benefits
Security Benefits from Community Network Effect

7. SHARING THE
SECURITY RESPONSIBILITY

8. Shared Security Model
• Shared Responsibility
– Let AWS do the heavy lifting
– Focus on what’s most valuable to your business
• Customer
• Choice of Guest OS
• Application Configuration Options
• Account Management flexibility
• Security Groups
• ACLs
• Identity Management
• AWS
• Facility operations
• Physical Security
• Physical Infrastructure
• Network Infrastructure
• Virtualisation Infrastructure
• Hardware lifecycle
management

9. Such as Amazon EC2, Amazon EBS, and Amazon VPC
Shared Security Model: Infrastructure Services

10. Such as Amazon RDS and Amazon EMR
Shared Security Model: Container Services

11. Such as Amazon S3 and Amazon DynamoDB
Shared Security Model: Abstracted Services

12. AWS SECURITY FEATURES

13. SECURE ACCESS
API ENDPOINTS USE TLS

15. BUILT-IN FIREWALLS
YOU CONTROL ACCESS TO YOUR INSTANCES

16. ROLE-BASED
ACCESS CONTROL
WITH FINE-GRAINED PERMISSIONS

17. MULTI-FACTOR
AUTHENTICATION
BUILT IN

18. PRIVATE SUBNETS
WITHIN YOUR AWS VIRTUAL PRIVATE CLOUD

19. ENCRYPT YOUR
DATA AT REST
USING AES 256 BIT ENCRYPTION KEYS

20. CLOUD HSM
A HIGHLY SECURE WAY TO STORE KEYS

21. DEDICATED
CONNECTION
AN OPTION WITH AWS DIRECT CONNECT

22. SECURITY LOGS
AWS CLOUDTRAIL, AWS CONFIG &
AMAZON CLOUDWATCH LOGS

23. TRUSTED ADVISOR
YOUR CUSTOMISED CLOUD EXPERT

24. VERIFYING OUR SECURITY

25. AWS is Level 1 compliant under the Payment Card Industry (PCI) Data
Security Standard (DSS). Customers can run applications on our PCI-
compliant technology infrastructure for storing, processing, and
transmitting credit card information in the cloud.
AWS is ISO 27001 certified under the International Organization for
Standardization (ISO) 27001 standard. ISO 27001 is a widely-adopted
global security standard that outlines the requirements for information
security management systems.
Many other government and industry compliance requirements are
also met by AWS. Find more at:
aws.amazon.com/compliance
Compliance at AWS

26. RESOURCES YOU CAN USE
TO LEARN MORE

27. aws.amazon.com/security/

28. AWS
Technical
Documentation

29. blogs.aws.amazon.com/security

30. Introduction to AWS Security
Security at Scale: Governance in AWS
Security at Scale: Logging in AWS
AWS Security Best Practices
Securing Data at Rest with Encryption
AWS Security Whitepaper
AWS Security White Papers

31. aws.amazon.com/iam
aws.amazon.com/vpc
aws.amazon.com/kms
aws.amazon.com/config
aws.amazon.com/cloudtrail
aws.amazon.com/cloudhsm
aws.amazon.com/cloudwatch
aws.amazon.com/trustedadvisor

32. Follow
us
for m
ore
events
&
w
ebinars
@AWScloud for Global AWS News & Announcements
@AWS_UKI for local AWS events & news
@IanMmmm
Ian Massingham — Technical Evangelist